FastStone Image Viewer 6.2 has a "Data from Faulting Address may be used as a return value" issue. This issue can be triggered by a malformed JPEG 2000 file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS (Access Violation) or possibly unspecified other impact.
References
Link | Resource |
---|---|
https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-8785 | Third Party Advisory |
Configurations
Information
Published : 2017-07-05 13:29
Updated : 2021-03-24 10:45
NVD link : CVE-2017-8785
Mitre link : CVE-2017-8785
JSON object : View
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
Products Affected
faststone
- image_viewer